konflux-operator-tasks
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-87062 | mod | 0.27 | 4.2 | — | Sep 8, 2026 | konflux-operator-tasks: konflux-operator-tasks: GitHub Actions referenced by mutable tag/branch instead of commit SHA | ||
| CVE-2026-87065 | low | 0.17 | 2.6 | — | Sep 8, 2026 | konflux-operator-tasks: konflux-operator-tasks: Tekton task steps run as root without defense-in-depth securityContext hardening | ||
| CVE-2026-87063 | low | 0.17 | 2.6 | — | Sep 8, 2026 | konflux-operator-tasks: konflux-operator-tasks: tkn CLI installed from network without checksum or signature verification | ||
| CVE-2026-87064 | low | 0.17 | 2.6 | — | Sep 8, 2026 | konflux-operator-tasks: konflux-operator-tasks: GitHub workflows lack explicit least-privilege permissions blocks |
- risk 0.27cvss 4.2epss —
konflux-operator-tasks: konflux-operator-tasks: GitHub Actions referenced by mutable tag/branch instead of commit SHA
- risk 0.17cvss 2.6epss —
konflux-operator-tasks: konflux-operator-tasks: Tekton task steps run as root without defense-in-depth securityContext hardening
- risk 0.17cvss 2.6epss —
konflux-operator-tasks: konflux-operator-tasks: tkn CLI installed from network without checksum or signature verification
- risk 0.17cvss 2.6epss —
konflux-operator-tasks: konflux-operator-tasks: GitHub workflows lack explicit least-privilege permissions blocks